
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: MKSxQke0FPP7xWYN5yCdKX2jNAJbSxGNTe7eZrufItM=
Subject key identifier: 47:F2:31:FE:51:A8:7B:AE:28:44:63:98:D6:CD:8B:10:A6:38:70:88
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019D9A06B0AF79CB886E1FDC3889B3A1223C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: CCWoMgy+KzQlMc8NDkZJiKHsuYn6fAHYctsznn0YTiA=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b0:af:79:cb:88:6e:1f:dc:38:89:b3:a1:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=47f231fe51a87bae28446398d6cd8b10a6387088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:27:2f:88:31:d5:da:60:a3:c2:82:67:67:
85:68:24:b6:93:e7:2a:af:f4:8d:5c:25:dd:43:fb:
30:03:c3:e2:63:db:73:91:7b:35:85:b1:3c:96:34:
a4:47:22:9e:2c:ad:49:50:1e:7b:23:9f:cf:99:2f:
28:c2:57:b5:8e:8d:e1:f7:c9:0d:cf:a9:da:cb:b7:
58:0e:da:0f:1b:e2:49:77:dd:dd:c7:57:4c:06:3e:
85:88:e8:ff:bd:85:64:24:3c:e6:d6:5d:83:96:97:
89:a1:7a:11:f7:21:26:33:5e:22:a0:1d:44:57:0e:
99:7c:a1:20:da:72:98:34:3c:fb:8c:7e:7e:29:9f:
ba:34:ea:bd:6f:e6:f9:40:4a:67:14:26:95:6e:dd:
64:aa:3f:5c:51:93:ac:ff:ef:0f:6c:35:79:72:7d:
4d:24:8c:fe:0c:29:f6:35:09:fe:cd:ee:5a:a4:5a:
20:bc:bc:31:7a:13:ca:5e:f8:90:6d:d3:15:75:8d:
c1:5c:d8:d0:43:55:9b:8e:d8:76:44:3a:2a:a2:f2:
5b:24:f3:49:c8:47:79:ed:15:a7:d2:91:28:40:c0:
36:8e:c4:5c:db:20:44:6c:b9:85:76:d8:a2:e2:ad:
90:79:aa:fd:02:59:f0:ed:af:3d:3a:57:78:aa:6b:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F2:31:FE:51:A8:7B:AE:28:44:63:98:D6:CD:8B:10:A6:38:70:88
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ac:77:92:f3:4e:52:1f:75:45:e8:78:09:c7:3c:51:77:0c:
d6:83:06:57:21:08:6a:72:26:ad:8a:35:9d:85:26:0d:bf:eb:
29:62:9b:e6:d6:b6:c6:49:2c:aa:75:32:ec:34:1f:2d:f6:c5:
b5:02:01:b4:d9:82:19:4e:23:a2:ce:e9:75:32:eb:1b:79:82:
d0:d3:f6:96:36:95:6e:06:f2:35:3b:aa:9c:62:66:4d:f7:f6:
24:8f:2c:d5:39:ce:69:4f:43:96:ca:a4:96:93:a8:7f:25:c3:
f9:e3:fa:3c:af:7f:3f:b2:ca:62:be:97:d3:ea:bc:9a:89:3e:
f8:6f:8c:e5:2f:3f:59:2a:92:ac:3f:e3:a6:fc:0d:79:de:1b:
24:45:15:72:5f:48:b8:c8:1a:36:91:b2:5e:4d:0a:f7:74:a8:
b2:6a:77:66:00:3a:65:a3:d6:87:a1:2f:99:30:0f:b6:8b:ff:
42:4f:00:bd:de:71:10:03:41:50:44:4a:2a:2c:13:b1:94:24:
49:11:ba:52:59:73:25:ba:b6:ee:36:62:8a:de:fd:fd:16:b8:
36:ba:25:b8:9c:e5:d8:cc:fd:43:87:6e:6d:b7:82:b0:44:6f:
b4:f3:51:cc:83:56:85:5f:9f:69:ba:67:52:bd:d5:06:c5:f8:
ee:63:59:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBrCvecuIbh/cOImzoSI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1
NjNkODIwHhcNMjYwNDE3MDYwMDIyWhcNMjYwNDE4MDYwMDIyWjAzMTEwLwYDVQQD
Eyg0N2YyMzFmZTUxYTg3YmFlMjg0NDYzOThkNmNkOGIxMGE2Mzg3MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxonL4gx1dpgo8KCZ2eFaCS2k+cq
r/SNXCXdQ/swA8PiY9tzkXs1hbE8ljSkRyKeLK1JUB57I5/PmS8owle1jo3h98kN
z6nay7dYDtoPG+JJd93dx1dMBj6FiOj/vYVkJDzm1l2DlpeJoXoR9yEmM14ioB1E
Vw6ZfKEg2nKYNDz7jH5+KZ+6NOq9b+b5QEpnFCaVbt1kqj9cUZOs/+8PbDV5cn1N
JIz+DCn2NQn+ze5apFogvLwxehPKXviQbdMVdY3BXNjQQ1Wbjth2RDoqovJbJPNJ
yEd57RWn0pEoQMA2jsRc2yBEbLmFdtii4q2Qear9Alnw7a89Old4qmvBWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfyMf5RqHuuKERjmNbNixCmOHCIMB8GA1UdIwQY
MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt
NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh
LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6x3kvNO
Uh91Reh4Ccc8UXcM1oMGVyEIanImrYo1nYUmDb/rKWKb5ta2xkksqnUy7DQfLfbF
tQIBtNmCGU4jos7pdTLrG3mC0NP2ljaVbgbyNTuqnGJmTff2JI8s1TnOaU9Dlsqk
lpOofyXD+eP6PK9/P7LKYr6X0+q8mok++G+M5S8/WSqSrD/jpvwNed4bJEUVcl9I
uMgaNpGyXk0K93Sosmp3ZgA6ZaPWh6EvmTAPtov/Qk8Avd5xEANBUERKKiwTsZQk
SRG6UllzJbq27jZiit79/Ra4NroluJzl2Mz9Q4dubbeCsERvtPNRzINWhV+fabpn
Ur3VBsX47mNZfw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:09 2026 by rpki-client